Project Community

Home Personas Problems Projects Publications About

Quick Links

Browse by Persona

Software Developer / Maintainer Open Source Professional (OSPO)Security Engineer / Architect CI/CD DevOps & Tooling Integrator Package & Repository Manager Executive / End-User Consumer

Browse by Problem

Build & Provenance Integrity Artefact Signing & Verification Dependency & SBOM Visibility Vulnerability Management Secure Repository Configuration Measuring Security Posture Policy & Compliance Enforcement Secrets Management

Browse by Project

Best Practices Badge Bomctl Criticality Score Fuzz Introspector FuzzingBrain Gemara gittuf GUAC in-toto Minder OpenSSF Model Signing (OMS)OpenBao OpenSSF Scorecard OSS-CRS Package Analysis Protobom / SBOM Tools Repository Service for TUF (RSTUF)SBOMit Secure Agentic Framework Sigstore slsa-github-generator slsa-verifier Zarf

Browse by Publication

Gemara Whitepaper in-toto Attestation OSPS Baseline OSV Schema & OpenVEX OSV Record (vulnerability record format)SARIF Software Bill of Materials Security Insights SLSA SLSA Provenance Vulnerability Exploitability eXchange

OpenSSF project

OSS-CRS

A framework for LLM-based bug-finding and bug-fixing systems applied to open source software, exploring autonomous vulnerability discovery and remediation.

All projects Start over

OpenSSF contributors
operations@openssf.org

Browse OpenSSF projects by the role you play. Every project is mapped to the personas it serves and the problems it solves, with a one-sentence, role-specific usage guide for each.

Copyright © OpenSSF contributors, a Series of LF Projects, LLC. For website terms of use, trademark policy, and other project policies please see https://lfprojects.org. This site is open source. View or contribute at GitHub.